Re: [squid-users] Two authentication helpers in one instance
OK, now it's clear for me (that the browser will choose method). But now I should enable fallback method to my negotiate squid_kerb_auth, becaouse Skype and other stuff won't work with negotiate helper. Can I use squid_kerb_auth both in negotiate and in basic mode? If browser is ok (IE8, IE9, FF, Chrome) - negotiate will fork fine. Else - basic auth. auth_param negotiate program /usr/lib/squid3/squid_kerb_auth auth_param negotiate children 5 auth_param negotiate keep_alive on auth_param basic program /usr/lib/squid3/squid_kerb_auth auth_param basic children 5 auth_param basic keep_alive on Regards
Re: [squid-users] Re: Two authentication helpers in one instance
> Hi Rafael, > > squid_kerb_auth can not handle basic authentication. You need an auth > handle which can use the username/password from basic authentication. It is > not a good idea to use the domain username/password with basic auth and not > SSL encryption. > > Does skype or your other clients work with NTLM or Negotiate/NTLM ? > > Markus Hi Markus! I'll check NTLM with skype as soon as I recover admin password for my dev environment :) All traffic is in isolated "corporate" network and basic auth is acceptable, but I'll try NTLM first. Regards